Privacy Policy

1. Short version

This website has no cookies, no analytics, no tracking pixels, no advertising technology, no embedded third-party content, no external fonts, and no contact form. It cannot build a profile of you, because it collects nothing and calls nothing.

We hold personal information only when you send it to us — by email, by booking a call, or in the course of an engagement.

2. What this website collects

Nothing. Specifically, this site does not set or read cookies or any other client-side storage; does not run JavaScript of any kind; does not load fonts, images, icons, scripts, or stylesheets from any third-party domain; does not use analytics, heatmaps, session recording, or A/B testing; and does not include social, advertising, or remarketing tags. There is no cookie banner because there is nothing to consent to.

Because there is no contact form, no data can be submitted to us through this site.

3. Hosting and server logs

This site is served by a third-party hosting provider. Like effectively all web hosting, that provider processes the technical request data required to deliver a page — including IP address, user agent, requested path, and timestamp — and may retain it briefly in operational logs for security and reliability purposes. We do not use that data to identify or profile visitors, and we do not combine it with any other information.

4. Information you send us directly

If you email us, we receive whatever you put in the message: typically your name, email address, firm, and the substance of your enquiry. We use it to respond to you and to assess whether an engagement is a fit. We do not add enquirers to a marketing list, and we do not sell, rent, or share contact information.

5. Scheduling and meetings

Scoping calls are booked through Calendly, a third-party scheduling service. When you follow our scheduling link you leave this website and Calendly's own privacy policy and cookie practices apply to that page — we do not control them and we do not embed Calendly here, precisely so that no third party is loaded on this site without your action. Calendly provides us with the booking details you supply, such as name, email address, and any answers you give to its questions.

Calls run on Google Meet. We do not record calls without asking first and obtaining agreement on the call.

6. Information shared during an engagement

During an audit you will share operational information about your firm, and may share commercially sensitive or professionally privileged material. We treat all of it as confidential under the engagement agreement, use it only to perform the audit, and do not disclose it to third parties except as the agreement permits or the law requires.

We do not permit client data to be used to train AI models, and we do not put client confidential information into AI tools whose terms fail to prohibit training on that input. The full position is set out in the AI usage disclosure.

Healthcare engagements are not currently being accepted, and we do not accept protected health information.

7. Why we process information

We process personal information to respond to enquiries, to negotiate and perform engagements, to meet legal and tax record-keeping obligations, and to protect our legitimate interests in operating and securing our business. Where a jurisdiction requires a stated lawful basis, ours are performance of a contract, compliance with a legal obligation, and legitimate interests.

We share personal information only with service providers who need it to help us operate — currently our hosting provider, email provider, scheduling provider, and meeting provider — and with professional advisers, or where required by law or legal process. We do not sell personal information, and we do not share it for cross-context behavioural advertising.

9. Retention

Enquiry correspondence is retained while there is an active discussion and for a reasonable period afterwards. Engagement records, including deliverables and the information underlying them, are retained for the period required for legal, tax, and professional record-keeping purposes, then deleted or anonymised. You may ask us to delete material earlier and we will do so where no legal obligation requires us to keep it.

10. Security

We apply access controls, encryption in transit, and least-privilege practices to client material, and we limit the number of people with access to any engagement. No method of transmission or storage is completely secure, and we do not claim otherwise. We hold no security certification and make no certification claim.

11. Your rights

Depending on where you live, you may have rights to access, correct, delete, or restrict the processing of your personal information, to object to processing, to data portability, and to be free from discrimination for exercising those rights. To exercise any of them, email contact@beyondxai.com. We will verify your identity before acting and respond within the period the applicable law requires.

We do not sell or share personal information as those terms are defined under Washington State law or the California Consumer Privacy Act, and we do not use personal information for automated decision-making or profiling that produces legal or similarly significant effects.

12. Children

This is a business-to-business service. It is not directed to children, and we do not knowingly collect information from anyone under 18.

13. International transfers

We operate from the United States, and information you send us is processed there. If you contact us from outside the United States, you are transferring information to the United States.

14. Changes

We may update this policy. The effective date at the top of this page indicates the current version.

15. Contact

Privacy enquiries: contact@beyondxai.com. Postal: BeyondX LLC, 1930 Burbank Ave NW, Olympia, WA 98502, United States. +1 360 909 9015 (voice and WhatsApp).